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P104465US/SAB 

APPARATUS FOR AND METHOD OF TRANSFERRING DATA 

The present invention relates to an apparatus for and method of transferring data. In 
particular the present invention enables data to be kept coherent such that where multiple 
measurements should come from a short time frame they are kept together and such that a 
process using this data does not use some "new" data in combination with some "old" data. 

There is often a need to ensure that data provided by a measurement system which may 
work asynchronously is provided within a correct context to a data processor. Thus, in 
order to correctly calculate a parameter such as engine speed, a data processor might need 
two input values which correspond to the same period of time. However given that the 
measurements of these input values may be updated in an asynchronous manner the data 
processor may read the first measurement into its memory and whilst it is doing this the 
second measurement may be updated and hence the first and second measurements no 
longer belong to the same time frame. A similar situation may arise between control 
channels in a system having redundancy where it is necessary to ensure that data values 
which pass between one channel and the other belong to the same time frame. 

Attempts have been made to overcome this timing problem, for example, by associating 
data packets with a header such that all the data associated with a particular header can be 
regarded as being contemporaneous. 

According to a first aspect of the present invention there is provided a data transfer 
apparatus for controlling the provision of data to a data processor where the data comprises 
at least two data items having a predetermined temporal relationship, the apparatus 
comprising: 

a first buffer N items deep for receiving data from sources of data and including N 
markers to indicate that a data item associated with the marker has been modified, where 
N is an integer; and 

a data flow controller responsive to the markers and to a data association instruction 
specifying the data items which have a temporal relationship such that the data flow 
controller only allows a group of data items haying a predetermined temporal relationship 
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to be read from the first buffer when the items in the group satisfy the predetermined 
temporal relationship. 

Preferably the predetermined temporal relationship is that all of the items in the group are 
near instantaneous or that they all belong to a single read cycle or measurement time frame. 

Preferably the data transfer apparatus further comprises a second buffer and a data item is 
transferred from the first buffer to the second buffer only when the data item satisfies any 
temporal constraints associated with it. 

Advantageously the second buffer includes M markers which indicate when the data item 
associated with a particular marker is modified. The markers in the first and second 
buffers may be in the form of single bits, which may be regarded as update bits, which are 
set when data is written to the buffer and reset when data is read from the buffer. 
Preferably M and N are equal. 

Preferably data having a temporal constraint can only be transferred from the first buffer to 
the second buffer if all the context sensitive data in the first buffer has been collected from 
the data sources. 

Preferably data having a temporal constraint can only be transferred from the first buffer to 
the second buffer if the corresponding data in the second buffer has not been read at all by 
a process (a sink process) utilising that data or all of the items sharing a temporal constraint 
have been read by the sink process. Thus the temporally constrained items within a group 
cannot be updated if some of the members of the group have been read by the sink process 
but others have not. This can be ensured by examining the status of the markers of the 
members of the group of temporally constrained data. 

Advantageously the items of data are assigned specific addresses within the first and 
second buffers. Thus, in the context of an aeronautical engine management system, the 
speed of a high speed turbine spool will always be written to the same position within the 
first buffer. Similarly, that particular item of data when transferred to the second buffer 
will always be written to the same position. 
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Preferably items of data which have a predetermined temporal significance with one 
another occupy contiguous addresses within the buffers. This has the advantage that the 
beginning of a group of items which have the predetermined temporal relationship can be 
marked with a marker, such as a "1" written into a sensitivity register specifying the 
contextual relationship between items in the first or second buffers, and similarly the end of 
such a group may be flagged with another marker, such as "1" being written into the 
sensitivity register. This has the advantage that all items between the beginning and end 
markers can be flagged with a different marker, such as zero, but searched for to correctly 
assign them to their group. 

According to a second aspect of the present invention there is provided a method of 
controlling the provision of data to a data processor wherein the data comprises a plurality 
of data items, at least two of which have a temporal relationship, the method comprising 
the steps of: 

a. Storing the data in a first storage area and updating a marker associated with an 
item of data when each item of data is modified; and 

b. Comparing the status of the markers with a data association instruction specifying 
which items of data have a temporal relationship to determine a group of temporally 
related data items, and only allowing those data items in the group to be read from 
the first storage area when all the items in the group satisfy the temporal 
relationship. 

The present invention will further be described, by way of example, with reference to the 
accompanying drawings, in which: 

Figure 1 schematically illustrates a engine controller including a data transfer apparatus 
constituting an embodiment of the present invention; 

Figure 2 schematically illustrates the contents of the first and second buffers of the data 
flow control apparatus; 

Figure 3 schematically illustrates the contents of the sensitivity register; and 
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Figure 4 schematically illustrates a format of data supplied from data sources. 

The arrangement shown in Figure 1 comprises a plurality of data sources 2, 4, and 6 which 
may be sensors, for example engine speed or engine temperature sensors and their 
associated data processing and transfer devices which enable the sensors to communicate 
with an engine controller 16 via a shared bus 10. Other devices such as other data 
processors may also be connected to the bus 10 and may wish to transfer information to the 
data processor 12 of the controller 16 which is arranged to receive the various sources of 
information and to process it to perform a specific function, such as to control the operation 
of an aeronautical gas turbine engine. 

In order to correctly derive measurements of performance of the engine, the controller 16 
may need to rely on various measurements being made within the same time frame, or 
within a measurement cycle of one of the data sources 2, 4 and 6. Thus, suppose that the 
data source 2 measures the rotational speeds of a high speed spool and a low speed spool of 
a gas turbine engine. The data processor 12 may need to know both of these measurements 
in order to correctly control the engine. The data source 2 may make the measurement of 
the high speed spool speed and the low speed spool speed within a given time frame and 
may then move on to perform other tasks before eventually returning to make subsequent 
speed measurements. 

However, if the device 2 merely wrote its data into a single buffer where it could be held 
for use by the controller 16, then there is a risk that the controller 16 might read a first one 
of the speed measurements from the single buffer, but before it had read the second speed 
measurement the data source 2 might update its indication of speed measurements into the 
buffer. Thus the measurement of high speed spool speed and low speed spool speed would 
no longer come from the same time frame, and hence the data would not be reliable. 

The present invention includes a data flow control apparatus 14 which buffers the data 
from the data sources 2, 4 and 6 and ensures that those items which are temporally 
sensitive, also known as context sensitive, are kept together such that context sensitive data 
is only made available to the data processor en-mass. 



5 



The flow control apparatus comprises a first buffer 20 arranged to receive data from the 
data sources 2, 4 and 6 and a second buffer 22 which receives data from the first buffer 20 
and which makes the data available for use by the data processor 12. A data flow 
controller 24 monitors the content of the first and second buffers 20 and 22, respectively, in 
order to ensure that data can only be transferred from the first buffer 20 to the second 
buffer 22 when all contextually sensitive data within a data group has been collected, and 
the data processor has either read all or none of the contextually sensitive data in the 
second buffer. 

An exemplary format of the data packet is shown in Figure 4. The data packet comprises a 
data field 32 in association with an address field 30 which identifies the location in the 
buffer 20 that the data 32 should be stored in. A check sum 34 is provided in order to 
ensure that corruption has not occurred within the address field or data field of the 
transmitted data. Provided a check sum as calculated by the buffer 20 when it receives the 
address and data information 30 and 32, respectively, matches the check sum 34 then it can 
be assumed that no corruption has occurred and the data can be passed to the correct 
address in the input buffer 20. Each of the data sources 2, 4 and 6 may operate 
asynchronously so data may arrive at the first data buffer 20 in any order. The buffer 20 is 
arranged, as shown in Figure 2, to include an update bit (or marker bit) within each data 
field. 

If we assume that we start with an empty buffer 20, then supposing that a data item is 
written to address 2, then the update bit associated with address 2 will be set from a zero to 
a 1 . Similarly, if data is subsequently written to address 3 then the update bit for address 3 
will also be set from a zero to a 1 . This is the state illustrated in Figure 2. 

The data flow controller 24 monitors the status of the update bits in the register 20 and also 
compares the status of the update bits to a sensitivity register. An example of a sensitivity 
register is shown in Figure 3. For each address or register number the sensitivity register is 
loaded with a value zero or one. Starting from address 1, the first entry in the sensitivity 
register is zero which shows that the data which would normally be allocated to address 1 
in the register 20 is not context or temporally sensitive and hence can be read by the data 
processor as and whenever it wants and consequently can be immediately transferred from 
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the first buffer 20 to the second buffer 22 as and when the data is updated. However, the 
sensitivity register is set to a one at address 2. This marks the commencement of a group 
of data items which are temporally related and hence which can only be made available to 
the data processor 12 en-mass. The third address in the sensitivity register is set to zero 
and hence this shows that the data item which would normally go to address 3 is associated 
with the data item which belongs to address 2. Similarly the sensitivity register is set to 
zero at address 4 which also indicates that the data item which belongs to address 4 is 
contextually related to the items that belong to address 2 and 3. At address 5 the sensitivity 
register is set to a one which functions as the end marker for the first group of the 
contextually sensitive data. Thus the data belonging to addresses 2 to 5 inclusive must be 
made available to the data processor only as a group. It can be seen that further groups can 
also be defined and Figure 3 shows an example where group 2 comprises two contextually 
sensitive data items and group 3 comprises three contextually sensitive items and groups 2 
and 3 are arranged contiguously within the buffers. The coding scheme chosen still, 
however, allows for the members of each group to be uniquely identified. 

Returning to our example, the data flow controller 24 monitors the activity in the registers 
and once addresses 2 to 5 of the buffer 20 have all been updated the data contained therein 
is transferred from the first buffer 20 the second buffer 22, again occupying addresses 2 to 
5. The update bits for addresses 2 to 5 in the first buffer 20 are reset to zero and the update 
bits 2 to 5 in the second buffer 22 are set to 1 . 

If the data processor reads any of the data in addresses 2 to 5 of the second buffer 22 then 
the associated update bit is set to zero. Furthermore, no alteration may be made to the 
addresses 2 to 5 of the second buffer 22 until each and every one of them has been read 
from. This ensures that the data processor 12 processes a set of context sensitive data 
without data from one time or measurement cycle being mixed with data from a different 
time or measurement cycle. 

If, however, the data sources 2, 4 and 6 had written new data to each of the addresses 2 to 5 
in the first buffer 20 before any of the data 2 to 5 in the second buffer 22 had been read 
then the data transfer controller 24 would allow the updated information from addresses 2 
to 5 to overwrite the corresponding items in the second buffer 22. 
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The data flow controller 24 is also arranged to ensure the data cannot be transferred from 
the first buffer 20 to the second buffer 22 if one item of data in a group has been updated 
more than other items of data in the group. To prevent the or each source process that 
supply data partially updating the data before it is transferred certain constraints are 
applied. The sink process (ie processes that use the data) must be allowed enough time to 
read a block of coherent data but not enough time for the data to be updated more than 
once. It should be noted that this read time starts when the sink process reads the first word 
of data, and not when the data is received. That is the data can be updated any number of 
times before the sink process reads it, however once the sink process has started reading the 
data, it must complete reading it before the source process can overwrite relevant data to 
which the transfer constraints are applied. Thus there must be a gap between successive 
updates of each coherent block of data (by the source) and the total read time by the sink 
process must be less than this (also allowing a short time for the transfer to take place). 

Coherent data items should always arrive in order and a data item arriving out of order will 
be prevented from updating. 

However the system designer has choices to deal with the data in the event that an attempt 
is made to partially update a block of context sensitive data. Referring back to Figure 3, it 
can be seen that items 2 to 5 of the register are contextually sensitive and hence should all 
belong to the same time frame. 

Starting from an initially empty register, we wait for each of the items 2 to 5 to be updated 
just once, and when this has occurred the block can be marked for transfer to the second 
buffer 22. 

If however, we expect the data to arrive in order, e.g. Item 2, item 3, item 4 then item 5 and 
for example item 2 attempts to update again before item 5 updates, then the designer may 
choose to allow item 2 to be updated and the items 3 and 4 to be overwritten - hence a new 
update cycle is initiated before the previous one is completed. 

Alternatively in the event that such data items arrive out of order and the overall data 
system is configured such that this should not happen, the data flow controller may be 
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authorised to issue a "refresh" instruction to the data sources asking them to recommence a 
measurement sequence. This technique may be of practical benefit for large data buffers. 

A further problem may arise if a check sum test is failed. It will then not be possible to 
determine whether the data or the address is incorrect and hence it is desirable to reset all 
of the data in the first buffer 20 and to clear all of the update bits. 

If the first buffer 20 is regarded as a receive buffer, since it receives data from the data 
sources 2, 4 and 6, and the second buffer 22 is regarded as a sink buffer, because it 
provides data to a sink process. It can be seen that the data flow controller 24 allows data 
to be transferred from the receive buffer to the sink buffer when: 

a. Data items have been updated and are not marked as context sensitive; 
or 

b. Data items are context sensitive and all of the data items in a group in the receive 
buffer have been updated AND the data processor 12 has either read all or none of 
the items in that group in the sink buffer. 

The sensitivity register may need to be updatable in order to allow for future updates of the 
engine management system. It is therefore advantageous that the sensitivity register be 
rewriteable and that the logic implemented by the data flow controller 24 be able to cope 
with such updates. 

The processes occurring within the data flow controller 24 may be performed in 
combinational logic or by an algorithm. An exemplary algorithm which may also be 
implemented in combinatorial logic, is shown below, 

where 

+ = Logical OR, & = Logical AND, © = Logical Exclusive OR, ~ = Logical NOT 
S<x> is the sensitivity bit for data item 6 x' 
S<x-1> is the sensitivity bit for data item 'x-T 
R<x> is the receive buffer update bit for data item 'x' 



U<x> is the sink buffer update bit for data item 4 x' 
Buffer size of c n' words. 

XOR<0> = S<0> 

XOR<x> = S<x> © XOR<x- 1 > 

TRUE for all but the last item in a context sensitive group. 
SENSITIVE<x> = XOR<x> + S<x> 

TRUE if data <x> is context sensitive. 
FIRST<x> = XOR<x> & S<x> 

TRUE if data <x> is the first context sensitive data item in a context sensitive 

group. 

LAST <x> = ~XOR <x> & S <x> 

TRUE if data <x> is the last context sensitive data item in a context sensitive 

group. 

RXUPDATE<n> = R<n> & (~SENSITIVE<n> + LAST<n> + ( SENSITIVE<n> 

&~LAST<n>)) 

Since n is the last item on the list then either SENSITIVE<n> or last <n> must be true and 
equation becomes RXUPDATE<n>=R<n> 

RXUPDATE<x> = R<x> & (~SENSITIVE<x> + LAST<x> + ( SENSITIVE<x> & 

~LAST<x> & RXUPDATE<x+l>) ) 

TRUE if data <x> is updated in the receive buffer, and if part of a context sensitive 
group all other data items in the same group are also updated. 

RE AD<x> = SENSITIVE<x> & ( ( READ<x- 1 > & ~FIRST<x> ) +~U<x>) 

TRUE if data item 'x' or a previous data item in the same context sensitive group 
has been read from the sink buffer by the sink process. 

UNREAD<x> = (U<x> & LAST<x>) + (XOR<x> & UNREAD<x+l> 

TRUE if data item 'x' or a later data item in the same context sensitive group has 
not been read from the sink buffer by the sink process. (Note that the value of 
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UNREAD<x+l> for the last data item n is 'don't care' because XOR<n> is always 
FALSE) 

READING<x> = READ<x> & UNREAD<x> 

TRUE if the sink process has read some, but not all, of the data items of a context 
sensitive group in the sink buffer. 

TRANSFER<x> = ~READING<x> & RXUPDATE<x> 

TRUE if the data word <x> may be transferred at the next update period i.e. 

• Data Items that have been updated and are not marked as context sensitive. 

• Data Items which are context sensitive provided that:- 

All of the data items in the group have been updated in the receive buffer. 
AND 

The sink process has either read all or none of the group from the sink 
buffer. 

If the implementation of the invention is such that it can be assured that the items in a 
group should update sequentially then the update of a Pth item in a group can be inhibited 
if the (P-I)th item of the group has not updated. 

It is thus possible to provide a method of and apparatus for controlling the transfer of data 
which utilises a double buffering arrangement and transfer control logic to ensure that 
temporally related measurements are kept together and cannot become mixed up with 
measurements from a preceding or subsequent time frame. 



